DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0f1b9114bbf7049d91af2a69c16fbda6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0f1b9114bbf7049d91af2a69c16fbda6_JaffaCakes118
Size
605KB
MD5
0f1b9114bbf7049d91af2a69c16fbda6
SHA1
55dc5dee29cf10ad4c783a345798f78bfd699e71
SHA256
b682acd6dc640f0d06571736239c67a16a99868e5e7012a21ca2a1c0a8aabc4f
SHA512
fa32dad2c0e7181c6a722813aa40ae7acfd33105b899b68ad752e0df4e4806a2741e83984627619a9262ed223b52750b0fe672a96988b9ddd15faa371ed796ec
SSDEEP
12288:QUu0knIXHRa4c2i72Omgtkv1+5cHgGld/XFgrVxq17Zz5CZgA:QH0cI3gpj76rHgg/XFgrVxAZz5Gg
Checks for missing Authenticode signature.
resource |
---|
0f1b9114bbf7049d91af2a69c16fbda6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ